---
services:
  openldap:
    image: osixia/openldap:latest
    container_name: openldap
    networks:
      public:
        ipv4_address: 192.168.240.42
    ports:
      - 389:389
      - 636:636
    volumes:
      - "${DOCKER_STORAGE_PATH}/openldap/config:/etc/ldap/slapd.d"
      - "${DOCKER_STORAGE_PATH}/openldap/data:/var/lib/ldap"
    env_file:
      - ../secrets/openldap.env
    environment:
      - LDAP_ORGANISATION=Homelab
      - LDAP_DOMAIN=${DOMAIN}
      # LDAP_ADMIN_PASSWORD provided via secrets/openldap.env
      - LDAP_OPENLDAP_UID=${PUID}
      - LDAP_OPENLDAP_GID=${PGID}
      - LDAP_READONLY_USER=true
      - LDAP_READONLY_USER_USERNAME=readonly
      # LDAP_READONLY_USER_PASSWORD provided via secrets/openldap.env
    restart: unless-stopped